
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/71284260-4191-4601-8af6-4eba3d42ac6c.roa
File: 71284260-4191-4601-8af6-4eba3d42ac6c.roa (raw, json)
Hash identifier: 7nnpvkzznBooPbhDptLJ0aaXobY1Xx7IyZ6lzkEKydQ=
Subject key identifier: 0A:40:40:58:A4:EA:E2:44:3A:11:66:65:D5:BF:8D:1B:E9:6C:F0:6B
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 71FD369ED654D15BA4AD806ED99D5E3B1C4834DE
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/71284260-4191-4601-8af6-4eba3d42ac6c.roa
Signing time: Wed 24 Jun 2026 16:47:19 +0000
ROA not before: Wed 24 Jun 2026 16:47:19 +0000
ROA not after: Tue 22 Sep 2026 23:59:59 +0000
asID: 21664
IP address blocks: 2600:f0f0:c100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 28 Jun 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:fd:36:9e:d6:54:d1:5b:a4:ad:80:6e:d9:9d:5e:3b:1c:48:34:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Jun 24 16:47:19 2026 GMT
Not After : Sep 22 23:59:59 2026 GMT
Subject: serialNumber=40bf73c4862fe2a9e7fa58f186fdccbd5e0c4ea94453cc08f55135c19ec13842, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:71:9e:b0:bf:1d:29:8d:a0:a6:6e:c6:bb:43:
00:70:2f:18:ec:5c:47:c9:55:50:47:ce:7f:2f:7f:
07:c3:e0:ce:6a:0c:85:29:c2:19:3a:cc:26:26:13:
1c:cd:ef:b3:f0:76:49:d1:a1:8a:9f:a2:e9:f6:2b:
d3:ae:f4:f4:c6:5f:ac:56:2d:84:a9:db:b5:38:5d:
05:ca:04:43:03:f2:aa:7d:7f:6c:32:19:13:56:db:
71:4a:16:71:98:0c:1f:35:c4:7e:22:65:0e:63:17:
aa:cb:40:b7:c3:7b:a0:48:dc:f5:7c:f0:7b:f3:e3:
6c:19:41:58:2e:51:c8:83:78:83:80:0b:ae:18:3d:
22:0f:be:43:ab:cd:ad:d4:c7:11:9a:99:d2:30:00:
52:c8:2b:22:04:0a:26:66:ba:34:b4:ba:32:05:1a:
0f:72:d4:d1:c2:bc:74:45:ae:22:a5:1f:03:91:4b:
79:7b:ca:12:81:e7:f5:74:cc:a1:73:ed:17:f3:7e:
ee:fa:41:15:ba:41:eb:7b:5c:ed:e9:e6:34:c5:1a:
63:5a:7c:eb:90:f7:7b:45:48:9c:88:57:04:d5:8c:
c1:24:90:db:10:c8:27:e5:c4:77:e3:10:5c:5f:66:
79:8c:ae:bd:a6:5f:72:20:8c:88:a7:d4:a9:bc:40:
8d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:40:40:58:A4:EA:E2:44:3A:11:66:65:D5:BF:8D:1B:E9:6C:F0:6B
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/71284260-4191-4601-8af6-4eba3d42ac6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:c100::/40
Signature Algorithm: sha256WithRSAEncryption
5d:36:9d:b0:27:ad:bb:2a:f5:23:7c:f0:ed:06:07:70:5a:33:
ac:69:ba:4b:a9:fe:38:85:d0:ba:1f:29:af:14:28:1e:b1:37:
d3:8b:f2:8e:84:57:54:c9:a4:6e:a0:8d:e1:3a:62:df:a0:37:
90:15:c2:c7:f1:d4:05:f8:1b:e9:c6:2e:20:cf:85:5d:c7:4e:
02:67:69:bb:f0:46:4e:6e:e0:8e:13:02:cc:32:eb:6f:c1:42:
3a:1d:08:a9:58:0b:68:92:01:03:63:64:25:f8:d8:d8:0d:23:
52:10:0b:f7:0c:9e:b8:0a:86:b8:18:f7:9e:9d:af:8e:e5:b3:
b8:aa:63:2c:32:86:64:10:e0:11:4f:20:c6:7b:19:79:c6:f6:
23:a8:d0:7b:63:b5:16:56:36:b4:c5:6b:88:88:4c:6e:1f:5d:
e3:41:33:5d:12:f3:c1:fa:78:44:dc:ae:b3:5c:16:c1:a0:f5:
7e:36:40:64:2f:f7:1e:06:7d:dc:78:05:3a:57:ff:61:93:55:
dc:1b:c0:bc:70:eb:35:47:4b:df:d2:70:38:18:f5:28:fa:43:
6f:9a:84:52:8c:82:a3:73:26:d9:92:68:7d:e0:4d:e5:40:db:
ee:55:42:b3:b3:bb:63:93:e1:3d:23:54:54:7b:7f:4d:f7:68:
87:50:99:f0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 27 14:05:07 2026 by rpki-client